drupal-theme

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This is an unverified GitHub repository (ivanboring/magoocomponentui) — while hosted on GitHub (not a shortener or archive with a password) the bootstrap script downloads and runs its code (npm install and executes the repo's CLI), so using it without inspecting the source is potentially dangerous.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The bootstrap explicitly fetches and executes code from a remote GitHub repository (and runs npm install there) and invokes the repo's theme-cli.mjs via a child node process, which creates a clear supply-chain / remote-code-execution vector that an attacker could use to exfiltrate data, steal credentials, or install a backdoor.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The runtime bootstrap bin/magoo fetches a public GitHub repository zip (ZIP_URL) or clones it (GIT_URL) into /tmp/magoo-component-ui, then runs node <repoDir>/scripts/theme-cli.mjs ..., so any free-form text contained in that outsider-authored repo (e.g., component metadata/templates/docs) can be ingested into the LLM context by the delegated CLI.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The bootstrap (bin/magoo) fetches and caches external code at runtime from https://github.com/ivanboring/magoocomponentui/archive/refs/heads/main.zip (or via git clone https://github.com/ivanboring/magoocomponentui) and then runs that repository's CLI (node scripts/theme-cli.mjs), which is remote code executed as a required dependency.